Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json)
Hash identifier: mcR0r6CMhhC+mcyu5so5iCydTR60Bb3j8V4v3K2fbjY=
Subject key identifier: 21:AD:F4:9C:A6:73:96:9F:44:A0:F5:E8:D9:B3:FB:55:B9:9E:C0:87
Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
Manifest number: 0161
Signing time: Sat 29 Mar 2025 03:27:58 +0000
Manifest this update: Sat 29 Mar 2025 03:27:57 +0000
Manifest next update: Sat 05 Apr 2025 03:27:57 +0000
Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: Vv4BQbDWWpCWOd5snUZz7KQ1F3q9xEF+QyBnlbiWgfs=)
2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: ed+DKZIJR1YbPJAhfNED0AymtEOfO9waIhPjdUrWQck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3E37
Validity
Not Before: Mar 29 03:27:57 2025 GMT
Not After : Apr 5 03:27:57 2025 GMT
Subject: CN=67e768be-c6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:32:22:70:92:8a:fd:63:44:a3:59:75:39:
31:23:94:05:5f:ad:8a:d3:19:08:d7:d3:78:e0:81:
5f:13:ea:20:34:6e:fe:21:63:56:43:d8:8f:36:70:
ba:52:da:86:36:28:ad:32:06:4b:14:16:42:29:29:
3f:2d:0f:4c:eb:3e:39:40:de:01:03:1e:89:92:88:
92:59:7a:35:5c:21:a8:fb:14:80:72:51:1b:c9:b8:
6a:ce:d1:53:e3:47:b9:af:02:5f:4f:96:09:bc:4a:
9e:e7:da:28:91:96:b9:ee:37:84:5b:cf:d4:0e:c2:
d2:c2:68:be:85:1a:bc:94:ad:3d:62:8f:bc:17:47:
45:47:50:c1:e1:96:e7:66:31:59:6a:3c:4d:30:41:
5d:b1:4a:13:46:27:2b:b3:42:5e:15:57:a6:8e:49:
5f:0b:4d:30:eb:a6:d7:8e:14:cb:7f:1f:dc:f2:d0:
d7:e3:8d:22:6f:09:1c:4d:91:7f:92:4a:8c:29:ab:
4d:e8:2e:6d:8f:05:ed:7b:94:fd:04:d9:95:b1:c8:
f3:7b:40:04:d5:62:3e:98:a1:2a:16:16:a3:47:eb:
ce:b7:d7:1e:e9:c8:57:91:ae:03:4f:4d:55:28:12:
4e:bb:02:70:fc:08:07:dd:e6:9f:64:09:bd:d9:28:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:F4:9C:A6:73:96:9F:44:A0:F5:E8:D9:B3:FB:55:B9:9E:C0:87
X509v3 Authority Key Identifier:
keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:79:97:c9:5f:7d:d5:01:e4:dd:94:62:91:86:77:cb:a1:
6d:77:53:1b:23:7c:9a:e5:f0:3a:e8:c4:be:01:63:a4:e8:42:
74:c1:da:73:66:19:32:cf:e6:7e:a1:44:9f:62:3a:59:65:d8:
6e:a2:4c:32:44:60:c5:9e:8d:68:57:58:ca:c7:97:41:bc:99:
fb:8d:5a:09:95:a4:92:2b:82:12:b2:95:56:55:31:fa:48:90:
87:fa:02:23:0b:b3:a2:9f:b6:ee:e1:43:38:a4:4c:ef:da:54:
d9:70:33:0d:de:03:3c:e4:bf:b3:b2:3f:32:38:44:ca:01:93:
b3:c5:c7:58:49:7a:d8:88:66:90:fe:ae:2d:ad:2e:ac:86:a3:
9d:4d:17:23:53:91:da:ed:64:f8:4f:75:a1:7b:08:c4:62:d9:
f2:6e:ca:1d:05:65:41:50:7c:e0:15:a8:c5:1b:fe:ba:cc:d9:
29:3f:83:06:9e:67:94:f5:31:ca:64:ee:e8:37:43:1d:da:9c:
a7:f7:3f:f1:39:6a:42:72:05:37:0c:82:12:26:7e:37:b6:a2:
10:d8:e4:82:a5:74:fb:fe:f0:fc:9f:ce:51:85:d7:9d:98:4a:
40:8b:2f:2d:de:2c:7b:18:18:b3:f4:96:ba:44:34:7b:bd:5b:
d2:d8:0c:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw
ODNDNDkwQTYwHhcNMjUwMzI5MDMyNzU3WhcNMjUwNDA1MDMyNzU3WjAYMRYwFAYD
VQQDEw02N2U3NjhiZS1jNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA230yInCSiv1jRKNZdTkxI5QFX62K0xkI19N44IFfE+ogNG7+IWNWQ9iPNnC6
UtqGNiitMgZLFBZCKSk/LQ9M6z45QN4BAx6JkoiSWXo1XCGo+xSAclEbybhqztFT
40e5rwJfT5YJvEqe59ookZa57jeEW8/UDsLSwmi+hRq8lK09Yo+8F0dFR1DB4Zbn
ZjFZajxNMEFdsUoTRicrs0JeFVemjklfC00w66bXjhTLfx/c8tDX440ibwkcTZF/
kkqMKatN6C5tjwXte5T9BNmVscjze0AE1WI+mKEqFhajR+vOt9ce6chXka4DT01V
KBJOuwJw/AgH3eafZAm92Sg4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGt9Jym
c5afRKD16Nmz+1W5nsCHMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw
OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM
UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRqHmXyV991QHk3ZRikYZ3y6Ftd1MbI3ya5fA66MS+AWOk6EJ0wdpz
Zhkyz+Z+oUSfYjpZZdhuokwyRGDFno1oV1jKx5dBvJn7jVoJlaSSK4ISspVWVTH6
SJCH+gIjC7Oin7bu4UM4pEzv2lTZcDMN3gM85L+zsj8yOETKAZOzxcdYSXrYiGaQ
/q4trS6shqOdTRcjU5Ha7WT4T3WhewjEYtnybsodBWVBUHzgFajFG/66zNkpP4MG
nmeU9THKZO7oN0Md2pyn9z/xOWpCcgU3DIISJn43tqIQ2OSCpXT7/vD8n85Rhded
mEpAiy8t3ix7GBiz9Ja6RDR7vVvS2Awe
-----END CERTIFICATE-----
Generated at Thu Apr 10 07:31:09 2025 by rpki-client